CVE-2015-4852 is a critical deserialization vulnerability in Oracle WebLogic Server, affecting versions 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0, allowing remote attackers to execute arbitrary commands via crafted serialized Java objects over the T3 protocol. This vulnerability has a CVSS score of 9.8 (CRITICAL) due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. It is actively exploited, listed in CISA's KEV catalog, and has publicly available exploit code, including Metasploit modules and ExploitDB entries, with significant community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.5.2CPE matchmatch criteria | cpe:2.3:a:oracle:virtual_desktop_infrastructure:*:*:*:*:*:*:*:* | ||
2.3CPE matchmatch criteria | cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3:*:*:*:*:*:*:* | ||
10.3.6.0.0CPE matchmatch criteria | cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* | ||
12.1.2.0.0CPE matchmatch criteria | cpe:2.3:a:oracle:weblogic_server:12.1.2.0.0:*:*:*:*:*:*:* | ||
12.1.3.0.0CPE matchmatch criteria | cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.